Lucene search

K
cveMitreCVE-2002-0434
HistoryJul 26, 2002 - 4:00 a.m.

CVE-2002-0434

2002-07-2604:00:00
mitre
web.nvd.nist.gov
18
cve-2002-0434
marcus s. xenakis
directory.php
remote execution
arbitrary commands
dir parameter
nvd

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.6

Confidence

High

EPSS

0.012

Percentile

85.1%

Marcus S. Xenakis directory.php script allows remote attackers to execute arbitrary commands via shell metacharacters in the dir parameter.

Affected configurations

Nvd
Node
marcus_s._xenakisdirectory.php
VendorProductVersionCPE
marcus_s._xenakisdirectory.php*cpe:2.3:a:marcus_s._xenakis:directory.php:*:*:*:*:*:*:*:*

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.6

Confidence

High

EPSS

0.012

Percentile

85.1%

Related for CVE-2002-0434